NightSpire
NightSpire is a digital extortion group that engages in data lock-in, first observed in early 2025, with an active leak site since March 2025 and double extortion tactics. Its claims regarding victims should be treated as statements by the actor unless independently confirmed.
- Incidents
- 2
- High impact
- 0
- First seen
- May 18, 2025
- Latest seen
- May 18, 2025
Linked incidents
NightSpire Reports an Attack Against BranchCore Technology C.A.
In May 2025, the NightSpire ransomware group claimed responsibility for a cyberattack against the Venezuelan IT company BranchCore Technology C.A. The threat actor claimed to have stolen 50 GB of data, with an estimated compromise date of May 18, 2025, and a planned leak date of May 22, 2025. It is unclear whether any data was actually leaked or whether the company suffered any financial losses.
NightSpire Reports an Attack on EPK
In May 2025, the Venezuelan children’s clothing brand EPK was targeted by a ransomware attack carried out by the threat actor NightSpire. The group claimed to have stolen 27 GB of data; the attack is estimated to have occurred on May 18, 2025, and was publicly disclosed on May 19, 2025. It is unclear whether the compromised data was ultimately leaked or whether the company suffered financial losses as a result of the incident.